Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/7ed4b819ff10188ecac7abf917648de6e70ef0fa.roa
File:                     7ed4b819ff10188ecac7abf917648de6e70ef0fa.roa (raw, json)
Hash identifier:          21O+BwhdmU5NLzyo3fXLC5ZnrygsjnmhnqzcOQPbiw4=
Subject key identifier:   DF:92:D2:C5:FF:AD:37:18:31:29:27:4D:B5:CF:1E:28:02:6B:2A:DC
Certificate issuer:       /CN=c02c00d9cd0064a040f39e140974a987585ff12e
Certificate serial:       05A1AA
Authority key identifier: 6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/7ed4b819ff10188ecac7abf917648de6e70ef0fa.roa
Signing time:             Tue 07 Jun 2022 21:14:59 +0000
ROA not before:           Tue 07 Jun 2022 03:00:00 +0000
ROA not after:            Fri 07 Jun 2024 03:00:00 +0000
asID:                     3640
IP address blocks:        192.84.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369066 (0x5a1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02c00d9cd0064a040f39e140974a987585ff12e
        Validity
            Not Before: Jun  7 03:00:00 2022 GMT
            Not After : Jun  7 03:00:00 2024 GMT
        Subject: CN=7ed4b819ff10188ecac7abf917648de6e70ef0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:29:e1:2c:b7:72:18:dc:18:41:a4:b5:39:8a:
                    5f:b4:1e:0f:46:18:d1:28:26:8b:07:47:b6:80:a2:
                    de:02:4a:2d:71:e5:65:ca:30:c1:c6:c7:eb:c3:21:
                    9c:d1:62:5f:09:12:df:7b:34:a6:b6:ec:d1:5c:61:
                    9e:ed:0f:fa:a1:81:94:32:b8:20:d5:96:9c:70:fe:
                    b1:a7:22:70:26:ad:39:0b:d1:3c:0c:ee:2f:da:0c:
                    50:49:3c:15:33:3a:63:e8:1d:d3:70:c2:81:3a:42:
                    25:f2:29:40:5c:f5:0f:0e:d8:db:f4:a0:d5:d8:d1:
                    b1:d6:dc:0b:28:5e:ea:b6:d5:be:b4:ff:09:1d:d7:
                    1f:c1:30:8c:14:3f:3a:03:43:54:91:93:06:cb:d4:
                    54:f9:df:c4:21:60:c8:14:04:54:82:ba:ca:86:fd:
                    7e:c4:2f:17:be:de:cd:e4:3d:0e:bd:4c:8a:bb:55:
                    ff:af:e7:0a:ce:3d:b3:59:88:2d:3b:08:3d:42:c3:
                    fe:c2:78:1a:a8:a5:66:37:b1:35:5c:fc:36:f9:87:
                    8e:b3:c7:3d:e8:65:82:58:3c:bc:62:0e:a0:2f:75:
                    cb:59:09:8b:a2:db:ff:fe:ac:1d:0f:40:77:33:2c:
                    8d:8a:ed:5f:3a:97:79:0a:07:92:07:ed:a4:52:6d:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:92:D2:C5:FF:AD:37:18:31:29:27:4D:B5:CF:1E:28:02:6B:2A:DC
            X509v3 Authority Key Identifier:
                keyid:6F:F7:9C:05:C6:2B:0F:71:1C:BF:1F:04:30:E3:A1:55:6D:AD:9D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02c00d9cd0064a040f39e140974a987585ff12e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/7ed4b819ff10188ecac7abf917648de6e70ef0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02a5f218-f7b1-47af-95f4-b1a218a9b96c/c02c00d9cd0064a040f39e140974a987585ff12e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b9:9c:74:2e:b1:9d:92:6c:b2:34:d9:02:a9:f1:a7:02:94:
         33:8b:31:d8:b7:54:28:56:64:ec:69:25:ed:d6:af:47:29:95:
         b1:32:86:49:62:d3:40:3c:6a:d8:98:fa:75:c4:37:20:7f:2d:
         bc:7e:46:43:da:4f:51:95:a8:9e:b2:08:55:b5:49:75:b1:9e:
         15:1a:81:6f:9d:87:1d:2d:d6:97:10:9e:0e:ff:44:b0:a3:ff:
         ac:5e:d9:69:ad:bd:7f:1a:c1:be:60:a6:0b:2d:8a:2f:51:d6:
         1e:c8:d8:0c:b1:63:11:e7:0c:85:c8:0e:d9:6a:f3:5e:39:83:
         12:84:a0:75:a6:77:d0:f5:36:e5:71:70:92:86:09:2d:9d:20:
         97:a5:04:ed:51:6e:8d:47:e0:8c:c7:65:1e:c3:be:0e:dc:cb:
         1d:06:ef:47:77:95:9b:77:3d:e9:bd:cc:71:3c:16:e7:c9:43:
         71:43:af:65:9b:a1:94:5e:46:03:91:27:c0:c6:74:d9:5c:f5:
         52:a5:ba:2d:d2:27:9f:cb:9d:c9:f0:0b:d9:50:21:43:be:3e:
         bc:48:82:e2:68:cb:6b:21:6f:03:77:f4:a8:1e:01:09:4c:b8:
         d6:fe:ed:92:29:a1:73:a8:f7:82:22:82:23:37:d3:e2:e1:9f:
         c9:66:ad:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:17 2024 by rpki-client on console-fra.rpki-client.org